A drastic solution is to uninstall all browsers. Browsers can’t get hacked when they don’t exist. You can switch to hosted browser service that runs browsers in the cloud, not on your computer.

To see how this works, watch the short videos at authentic8 dot com and Citrix dot com/virtualization/secure-browser

This newsletter is targeted to executives who don’t need to understand technology, so you may choose to forward the following technical information to your IT Department.

And please forward this to anyone whose cybersecurity you care about.

For our more technical audience: As of today, only authentic8’s solution supports general web browsing, but both support web applications.

Since these services put security first, and functionality a close second, you may still need a local browser for some applications if they don’t function properly in the hosted browser environment. But, if that is the case, you may be able to remove Flash and Java from your systems to make your local browsers more secure.

The biggest problem with both products is that they do not have a way to be set as the default browser to be used if a user clicks inside an email message. So, if you must leave a local browser installed, your users will still need to be careful about clicking links in email messages. The solution may be available soon.

Hosted browsers still protect your computers during web browsing sessions. And it becomes practically impossible for an attacker to use a hosted browser to access the sensitive data stored on your network drives.

Investigate using a hosted browser for added protection against the many threats on the Internet that exploit browsers and plugins such as Flash and Java.

The post Finally, a Solution to Solve What May Be the Biggest Cyber Security Risk at Your Organization appeared first on Foster Institute.

Anything involving an ACH or a wire transfer request should immediately raise a huge red flag for every single user in all organizations.

Send the following to your customers, prospects, and everyone with whom you do business:

If you receive any kind of communication, asking for an ACH or wire transfer to (your organization), it is a brazen attempt by fraudsters to steal money. Ignore requests sent via invoice, email, fax, snail mail, phone call, social media, text message, overnight letters, and by any other form of communication. Even if the communication contains logos and looks official, ignore it. If the wire transfer request provides a printed or verbal phone number to phone (your organization) to get approval, do not believe that phone number. It probably goes to a call center managed by attackers. If you want to phone us, please do so by calling the number you have on file, or the number listed on our website. Do not reply to any email messages. The reply is likely to go to the fraudsters. They will continue to bluff you. Please alert everyone in your AR department, and anyone else who has authorization to make wire transfers to never transfer money to (your organization).

And, of course, if you do business using wire transfers, notify them that if they ever see a request to transfer money, they need to call, by voice, a specific person at your office each time, a person you specifically identify to them ahead of time, at a specific phone number, to confirm the accounts and all details prior to transferring any money to you.

And, the request does not necessarily indicate you’ve been hacked. But – if the fraudsters know things such as your customer names, current projects, deals that are about to close, invoices, and any other similar information, you should suspect the possibility of a breach of you or the other party. If the fraudsters know when key people are out of the office, that should raise your level of suspicion even higher. The attackers stand to gain huge financial rewards when they successfully receive money wired to them, so they are willing to invest the time to infiltrate your systems in order to gather information that will make their fraudulent attack appear to be a legitimate request.

Please forward this email message to everyone you care about. For some reason, companies just don’t think this will affect them, until it does. This is becoming a national crisis. Tell them: Yes, this means you!

The post Alert – ACH and Wire Transfer Fraud at Epic Levels appeared first on Foster Institute.